Leaderboard
Scored on public signals; components with none are listed as Unranked · Formula
Component
Domain
Vertical
| Rank | Score | Component | Description | Evidence | Last commit | Install |
|---|---|---|---|---|---|---|
| 601 | 61.362 | vulnersmcp · searchalso listed as vulners-mcp-server | Vulnerability database with CVE search, software auditing, and security bulletin retrieval | 6 stars · 4 forks | No one-command install · Source | |
| 601 | 61.362 | akirose-image-recognitionmcp · back-end | Provides image recognition and description capabilities for both local files and remote URLs with configurable security controls including path… | 6 stars · 4 forks | No one-command install · Source | |
| 604 | 61.350 | tie-mcp-servermcp · back-end | MCP server for the Tenable Identity Exposure API, providing 131 tools for complete API coverage with multi-tenant support and granular security… | 16 stars | No one-command install · Source | |
| 605 | 60.852 | niyonabil-bloggermcp · back-end | Connects to Google's Blogger API for creating, updating, and managing blog posts through TypeScript-based Node.js implementation with Google… | 1 star · 6 forks | No one-command install · Source | |
| 606 | 60.684 | skillsguardmcp · ai-agents | Static security scanner for AI agent skill packages that detects malicious SKILL.md files and bundled scripts before they run. | 15 stars | No one-command install · Source | |
| 607 | 60.677 | gh-rul1an-assaymcp · other | Firewall for tool calls with policy enforcement, audit trails, and replayable evidence bundles. | 9 stars · 1 fork | No one-command install · Source | |
| 607 | 60.677 | kimwwk-repocrunchmcp · ai-agents | MCP server that gives AI agents structured, ground-truth GitHub repository intelligence. Analyze tech stack, dependencies, architecture, health… | 9 stars · 1 fork | No one-command install · Source | |
| 607 | 60.677 | build-in-public-mcp-servermcp · auth | Enables sharing coding progress on Twitter by analyzing sessions and generating tweet suggestions, with tools for posting tweets, threads, and OAuth… | 9 stars · 1 fork | No one-command install · Source | |
| 607 | 60.677 | querypie-database-access-controlmcp · observability | Provides a secure interface for monitoring and managing privileged database access, enabling administrators to review logs, detect security anomalies… | 9 stars · 1 fork | No one-command install · Source | |
| 607 | 60.677 | grype-mcp-servermcp · back-end | Enables AI assistants to perform vulnerability scanning using Grype, supporting scans of directories, container images, and packages via the Model… | 9 stars · 1 fork | No one-command install · Source | |
| 607 | 60.677 | npmplus-mcpmcp · search | Enables AI-powered JavaScript package management including search, install, update, remove, and security auditing across npm, yarn, and pnpm. | 9 stars · 1 fork | No one-command install · Source | |
| 607 | 60.677 | odinmcpmcp · back-end | A distributed MCP server framework enabling scalable task execution across multiple nodes with streamable HTTP transport, integrated authentication… | 9 stars · 1 fork | No one-command install · Source | |
| 614 | 60.262 | labbymcp · back-end | Labby is a Rust-based MCP gateway that connects and aggregates multiple upstream MCP servers, with authentication, Code Mode (JavaScript snippets)… | 7 stars · 2 forks | No one-command install · Source | |
| 614 | 60.262 | aikstockdatamcp · back-end | MCP server for Korean stock market data (KOSPI/KOSDAQ) and DART disclosures, providing tools to get today's market summary, search stocks, retrieve… | 7 stars · 2 forks | No one-command install · Source | |
| 614 | 60.262 | urldna-mcpmcp · back-end | MCP server for automated URL scanning and forensic phishing triage. Captures full DOM snapshots, network requests, and visual screenshots to identify… | 7 stars · 2 forks | No one-command install · Source | |
| 614 | 60.262 | gh-yuunnn-w-rust-toolsmcp · back-end | High-performance MCP server with WebUI, 18 built-in tools, and security controls. | 7 stars · 2 forks | No one-command install · Source | |
| 614 | 60.262 | x-mcp-2-0mcp · auth | Enables users to interact with X/Twitter via Claude, allowing posting tweets, searching, liking, retweeting, and more using OAuth 2.0 PKCE… | 7 stars · 2 forks | No one-command install · Source | |
| 614 | 60.262 | tb0hdan-wassmcp · authalso listed as wass-mcp | Integrates Nikto and Wapiti vulnerability scanners with persistent execution history for conducting authorized penetration testing and maintaining… | 7 stars · 2 forks | No one-command install · Source | |
| 614 | 60.262 | mcp-reconmcp · back-end | A comprehensive MCP server for web security reconnaissance, providing tools for passive and active information gathering, DNS analysis, network… | 7 stars · 2 forks | No one-command install · Source | |
| 614 | 60.262 | kevin-weitgenant-linkedin-posts-huntermcp · database | Automates LinkedIn job post discovery and tracking through browser automation with persistent authentication, local SQLite storage, and a React… | 7 stars · 2 forks | No one-command install · Source | |
| 614 | 60.262 | adriyansyah-mf-pentestmcp · database | Orchestrates penetration testing workflows through Nmap, Nuclei, Nikto, SQLMap, and Metasploit integration with automated reconnaissance… | 7 stars · 2 forks | No one-command install · Source | |
| 614 | 60.262 | mistersandfr-supabase-selfhostedmcp · database | Integrates with Supabase instances through dual client API and direct PostgreSQL connections to enable database operations, user management, schema… | 7 stars · 2 forks | No one-command install · Source | |
| 614 | 60.262 | mohdhaji87-sqlmapmcp · database | Exposes SQLMap's SQL injection testing capabilities through 12 tools for vulnerability scanning, database enumeration, data extraction, and system… | 7 stars · 2 forks | No one-command install · Source | |
| 614 | 60.262 | gkhays-nvdmcp · database | Provides direct access to the National Vulnerability Database (NVD) for retrieving detailed CVE information including descriptions, severity ratings… | 7 stars · 2 forks | No one-command install · Source | |
| 627 | 60.035 | go-unifi-mcpmcp · other | Manage UniFi sites, devices, clients, networks, port forwarding, DNS, and firewall rules. | 6 stars · 3 forks | No one-command install · Source | |
| 627 | 60.035 | antonio-mello-ai-pfsensemcp · observabilityalso listed as io-github-antonio-mello-ai-mcp-pfsense | Manage pfSense firewalls through AI assistants with rules, DHCP, DNS, and monitoring tools. | 6 stars · 3 forks | No one-command install · Source | |
| 627 | 60.035 | muhammed-abdelghany-rest-apimcp · back-end | Interact with REST APIs with automatic authentication, token caching, and OpenAPI endpoint discovery. | 6 stars · 3 forks | No one-command install · Source | |
| 627 | 60.035 | panossalt-mcp-gatewaymcp · auth | Production gateway platform connecting AI assistants to databases with authentication, RBAC, and audit logging. | 6 stars · 3 forks | No one-command install · Source | |
| 627 | 60.035 | lyuboslavlyubenov-analyze-soliditymcp · observability | Analyzes Solidity smart contracts through AST parsing to trace function execution flows, variable interactions, state changes, and external contract… | 6 stars · 3 forks | No one-command install · Source | |
| 627 | 60.035 | bernerspace-slackmcp · auth | Integrates with Slack workspaces through OAuth 2.0 authentication and JWT-based client identification to provide messaging, channel management, file… | 6 stars · 3 forks | No one-command install · Source | |
| 627 | 60.035 | mrgnss-claude-desktop-commandermcp · ai-agents | Enables Claude Desktop to execute terminal commands and manage files on the user's computer with security measures like command blacklisting and path… | 6 stars · 3 forks | No one-command install · Source | |
| 635 | 59.854 | mcpfoundrymcp · back-end | A CLI tool that generates production-ready MCP servers from databases or OpenAPI specifications, with optional security shields. | 14 stars | No one-command install · Source | |
| 636 | 59.040 | yashash4-reef-registrymcp · ai-agents | MCP supply chain security registry with signed verification, runtime policy enforcement, and insurance artifacts for AI agent fleets. | 13 stars | No one-command install · Source | |
| 637 | 59.029 | vulncheck-mcp-servermcp · back-end | Connects AI assistants to VulnCheck vulnerability intelligence for querying CVEs, exploits, advisories, and vulnerable packages via natural language. | 8 stars · 1 fork | No one-command install · Source | |
| 637 | 59.029 | gautamvarmadatla-safety-wardenmcp · other | MCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution. | 8 stars · 1 fork | No one-command install · Source | |
| 637 | 59.029 | pipepie-pipepiemcp · auth | Self-hosted webhook relay and tunnel with Noise NK encryption. 13 MCP tools to inspect requests, replay webhooks, trace AI pipelines… | 8 stars · 1 fork | No one-command install · Source | |
| 637 | 59.029 | infrastructure-mcp-servermcp · devops | An MCP server and terminal UI that orchestrates Cloudflare, Namecheap, and Fleet from a single interface, enabling domain onboarding with automatic… | 8 stars · 1 fork | No one-command install · Source | |
| 637 | 59.029 | anand-kamble-instagrammcp · auth | Integrates with Instagram to enable profile viewing, content discovery, timeline browsing, story access, post interactions, commenting, and user… | 8 stars · 1 fork | No one-command install · Source | |
| 637 | 59.029 | simple-python-mcp-servermcp · back-end | A simple MCP server implementation in Python using FastMCP and FastAPI, providing streamable HTTP transport with optional OAuth authorization for… | 8 stars · 1 fork | No one-command install · Source | |
| 643 | 58.969 | kiranreddi-sentinel-dvmcp · observability | Security-first access to SystemVerilog/UVM/cocotb verification intelligence with 14 specialized tools for test analysis, coverage metrics, assertion… | 4 stars · 4 forks | No one-command install · Source | |
| 643 | 58.969 | firesh-sslmonmcp · observability | Monitors SSL certificates and domain registrations with real-time certificate validation and WHOIS lookups to track expiration dates, registrar… | 4 stars · 4 forks | No one-command install · Source | |
| 643 | 58.969 | pouyanafisi-gmailmcp · auth | Integrates with Gmail through OAuth2 authentication | 4 stars · 4 forks | No one-command install · Source | |
| 643 | 58.969 | osdeibi-typebotmcp · auth | Integrates with Typebot's chatbot platform using workspace tokens for authentication to enable management of chatbot workflows and bot instances. | 4 stars · 4 forks | No one-command install · Source | |
| 647 | 58.290 | datadoemcp · back-end | Connects to Amazon Seller Central, Vendor Central, and Amazon Ads APIs with managed authentication and rate limiting. | 12 stars | No one-command install · Source | |
| 647 | 58.290 | cortex-gatewaymcp · back-end | A federated MCP gateway that consolidates multiple plain-HTTP backends into a single, OAuth-protected MCP server, enabling agents to access diverse… | 12 stars | No one-command install · Source | |
| 647 | 58.290 | ctkadvisors-graphqlmcp · back-end | Transforms any GraphQL API into dynamic tools through automatic schema introspection, enabling direct access to structured data with parameter… | 12 stars | No commit datelisted | No one-command install · Source |
| 650 | 58.185 | securitahguy-rapid7mcp · other | Queries vulnerability and threat data across Rapid7 InsightVM, InsightIDR, and Metasploit Pro using natural language. | 6 stars · 2 forks | No one-command install · Source | |
| 650 | 58.185 | egarcia74-sql-servermcp · database | Integrates with Microsoft SQL Server databases to provide query execution, schema exploration, and data retrieval capabilities with support for both… | 6 stars · 2 forks | No one-command install · Source | |
| 650 | 58.185 | vibeguard-mcp-servermcp · back-end | Enables AI coding tools to scan projects for security vulnerabilities, hardcoded secrets, injection flaws, and privacy violations with 699 rules and… | 6 stars · 2 forks | No one-command install · Source | |
| 650 | 58.185 | doppler-mcp-servermcp · back-end | Enables AI assistants to interact with the Doppler API for secrets management, including listing, retrieving, and updating secrets across projects and… | 6 stars · 2 forks | No one-command install · Source | |
| 650 | 58.185 | gjenkins20-webmin-mcp-servermcp · back-end | MCP server for Webmin with 61 tools for Linux system administration: services, users, storage, security, databases, and more. | 6 stars · 2 forks | No one-command install · Source | |
| 650 | 58.185 | 0xbuz3r-emba-firmware-analyzermcp · other | EMBA firmware security analysis for embedded device scanning. | 6 stars · 2 forks | No one-command install · Source | |
| 650 | 58.185 | alfresco-mcp-servermcp · back-end | A minimal MCP server for Alfresco providing tools via the Alfresco REST API, with ticket-based authentication and support for stdio, SSE, and HTTP… | 6 stars · 2 forks | No one-command install · Source | |
| 650 | 58.185 | abhirockzz-cosmosdb-gomcp · database | Enables natural language interaction with Azure Cosmos DB for querying, creating, and managing databases, containers, and items through Go-based tools… | 6 stars · 2 forks | No one-command install · Source | |
| 650 | 58.185 | florentinemcp · database | Natural language interface for MongoDB databases with vector search and multi-tenant security | 6 stars · 2 forks | No one-command install · Source | |
| 650 | 58.185 | thiagofrag-ldplayer-android-pentestmcp · other | Provides Android penetration testing capabilities through LDPlayer emulator integration with ADB commands, Frida script injection, and 38 security… | 6 stars · 2 forks | No one-command install · Source | |
| 650 | 58.185 | x746b-mac-forensicsmcp · database | Integrates with macOS forensic tools like FSEParser and unifiedlog_iterator to parse system artifacts, correlate timeline events, and detect security… | 6 stars · 2 forks | No one-command install · Source | |
| 650 | 58.185 | pooriayousefi-intellistantmcp · ai-agents | Production C++23 multi-agent development framework with specialized agents for coding, DevOps, documentation, testing, data analysis, and security. | 6 stars · 2 forks | No one-command install · Source | |
| 650 | 58.185 | gensecai-sonicwallmcp · observability | Integrates with SonicWall firewalls to provide natural language log analysis, threat detection, connection searching, and security statistics with… | 6 stars · 2 forks | No one-command install · Source | |
| 650 | 58.185 | rustsandbox-gmailmcp · auth | Provides a clean interface for accessing Gmail emails through OAuth2 authentication, automatically handling authentication flows and processing HTML… | 6 stars · 2 forks | No one-command install · Source | |
| 650 | 58.185 | elizabethsiegle-scrape-and-analyze-websitemcp · auth | Enables website analysis and content extraction using Cloudflare Workers, providing tools to scrape, summarize, and answer questions about web pages… | 6 stars · 2 forks | No one-command install · Source | |
| 650 | 58.185 | pmarkowsky-santa-binary-authorizationmcp · auth | Enables security professionals to interact with Santa binary authorization system for macOS, providing tools to query status, sync rules, retrieve… | 6 stars · 2 forks | No one-command install · Source | |
| 666 | 57.927 | daedalusmcp · browser | Enables driving a real Chrome instance remotely through MCP, including per-tab control, JavaScript evaluation, screenshots, cookie and network… | 1 star · 5 forks | No one-command install · Source | |
| 667 | 57.754 | shcallaway-gmailmcp · auth | Integrates with Gmail for inbox access, message search, thread management, label operations, draft creation, and email actions like archiving and… | 3 stars · 4 forks | No one-command install · Source | |
| 667 | 57.754 | sanyambassi-thales-cdsp-crdp-mcp-servermcp · back-end | MCP server for Thales CipherTrust Manager RestFul Data Protection service. | 3 stars · 4 forks | No one-command install · Source | |
| 667 | 57.754 | omd01-aws-sesmcp · devops | Enables direct email sending through Amazon SES with support for HTML content, CC/BCC recipients, and reply-to addressing while maintaining AWS… | 3 stars · 4 forks | No one-command install · Source | |
| 667 | 57.754 | bmorphism-slowtimemcp · other | Integrates drand and tlock-js to enable secure, time-locked encryption for managing scheduled events with cryptographic guarantees. | 3 stars · 4 forks | No one-command install · Source | |
| 667 | 57.754 | dkmaker-function-app-testermcp · auth | Enables testing of Azure Function Apps through a command-line interface supporting various HTTP methods, custom headers, and multiple authentication… | 3 stars · 4 forks | No one-command install · Source | |
| 672 | 57.364 | agent-sudo-mcpmcp · auth | Local zero-trust permission gateway for AI agents. Enforces policy-based tool authorization, human approvals, scoped permissions, and… | 5 stars · 3 forks | No one-command install · Source | |
| 672 | 57.364 | cisco-nx-os-cli-mcp-servermcp · back-end | Enables interaction with Cisco NX-OS devices through CLI commands via NX-API. Supports single and multi-device command execution with text or JSON… | 5 stars · 3 forks | No one-command install · Source | |
| 672 | 57.364 | atomic-crm-mcpmcp · authalso listed as marmelab-atomic-crm | MCP server for Atomic CRM that enables agents to read and write CRM data via SQL queries, with OAuth authentication and Row Level Security enforced. | 5 stars · 3 forks | No one-command install · Source | |
| 672 | 57.364 | mcp-nettoolsmcp · back-end | A Model Context Protocol server that provides network diagnostics and scanning tools such as nmap, DNS lookups, whois, traceroute, and security… | 5 stars · 3 forks | No one-command install · Source | |
| 677 | 57.311 | ente0-mcpstrikemcp · ai-agentsalso listed as mcpstrike | Autonomous penetration testing framework combining LLM analysis with 14 security tools for vulnerability discovery, exploitation, and reporting. | 11 stars | No one-command install · Source | |
| 677 | 57.311 | sabbamcp · ai-agents | MCP server for security bug-finding that proves every finding by running exploits, enabling agents to verify changes and find bugs with… | 11 stars | No one-command install · Source | |
| 677 | 57.311 | apk-security-guard-suitemcp · other | Integrates JADX, MobSF, JEB Pro, and APKTOOL to provide Android APK decompilation, security scanning, reverse engineering, and resource extraction for… | 11 stars | No commit datelisted | No one-command install · Source |
| 681 | 57.245 | benahammond-code-auditormcp · other | Analyze code for SOLID principles, DRY violations, and security issues | 7 stars · 1 fork | No one-command install · Source | |
| 681 | 57.245 | mcpgoatmcp · back-end | A deliberately insecure MCP server for practicing penetration testing, featuring 26 challenges at three difficulty levels with flags to capture… | 7 stars · 1 fork | No one-command install · Source | |
| 681 | 57.245 | math280h-safe-pkgsmcp · other | Analyzes npm and Cargo packages for security risks through typosquatting detection, version analysis, and advisory scanning. | 7 stars · 1 fork | No one-command install · Source | |
| 681 | 57.245 | 7majesty-m-terminal-guardianmcp · devops | Provides secure sandboxed terminal access with risk analysis and deny-by-default security controls. | 7 stars · 1 fork | No one-command install · Source | |
| 681 | 57.245 | vignaesh01-dataverse-devtoolsmcp · observability | Integrates with Microsoft Power Platform Dataverse environments to provide user administration, security role management, entity metadata exploration… | 7 stars · 1 fork | No one-command install · Source | |
| 681 | 57.245 | social-cli-mcpmcp · comms | MCP server for posting to Twitter/X, Reddit, LinkedIn, Instagram, and email via CLI or AI agents, with Telegram bot control and security… | 7 stars · 1 fork | No one-command install · Source | |
| 681 | 57.245 | cyberillo-kali-linuxmcp · database | Exposes 21 Kali Linux offensive security tools including Nmap, SQLMap, Metasploit, and password crackers via Docker. | 7 stars · 1 fork | No one-command install · Source | |
| 681 | 57.245 | aws-security-mcp-servermcp · back-end | Enables management and analysis of AWS security groups, S3 buckets, and VPC connections via MCP. | 7 stars · 1 fork | No one-command install · Source | |
| 681 | 57.245 | cyberroute-exploitdbmcp · database | Provides direct access to the Exploit-DB database through the searchsploit command-line tool for security research and penetration testing. | 7 stars · 1 fork | No one-command install · Source | |
| 681 | 57.245 | remote-mcp-server-authless-2mcp · devops | Deploy a remote MCP server on Cloudflare Workers without authentication, and connect it to AI Playground or Claude Desktop. | 7 stars · 1 fork | No one-command install · Source | |
| 691 | 56.206 | proofpoint-mcpmcp · back-end | MCP server for Proofpoint Email Protection - email security, threat intelligence, TAP (Targeted Attack Protection), and email filtering API… | 2 stars · 4 forks | No one-command install · Source | |
| 691 | 56.206 | janschmiedgen-muralmcp · auth | Integrates with Mural's collaborative visual workspace platform through OAuth 2.0 authentication to manage workspaces, rooms, murals, sticky notes… | 2 stars · 4 forks | No one-command install · Source | |
| 693 | 56.183 | coreyhines-opnsense-mcpmcp · back-end | OPNsense firewall operations via API. Query ARP, DHCP, firewall rules, logs, interfaces, system status, and packet capture via STDIO or SSE. | 10 stars | No one-command install · Source | |
| 693 | 56.183 | mcp-media-9routermcp · back-end | Enables AI agents to perform web searches and fetch web pages as clean Markdown via the 9router API, with configurable provider fallbacks and local… | 10 stars | No one-command install · Source | |
| 695 | 55.515 | onelogin-mcpmcp · auth | OneLogin API integration for user, app, role, and authentication management. | 5 stars · 2 forks | No one-command install · Source | |
| 695 | 55.515 | qihoo360-ecs-cloud-storagemcp · search | Provides comprehensive file management and cloud storage operations including upload, download, search, move, rename, delete, directory management… | 5 stars · 2 forks | No one-command install · Source | |
| 695 | 55.515 | commercial-creatormcp · auth | Enables AI agents to produce video commercials from product descriptions via a multi-stage pipeline with human-in-the-loop approval gates and explicit… | 5 stars · 2 forks | No one-command install · Source | |
| 695 | 55.515 | scopeblind-verify-mcpmcp · back-end | Offline verification of signed artifacts -- receipts, manifests, audit bundles. Ed25519 + JCS. No accounts, no API calls. Apache-2.0. | 5 stars · 2 forks | No one-command install · Source | |
| 695 | 55.515 | knowbe4-mcp-servermcp · back-end | Enables AI assistants to interact with KnowBe4 security awareness training data via the KnowBe4 Reporting REST API. | 5 stars · 2 forks | No one-command install · Source | |
| 695 | 55.515 | razemcp · back-end | Raze is an MCP server that integrates with AI assistants to analyze, validate, and prove smart contract security issues using deterministic Foundry… | 5 stars · 2 forks | No one-command install · Source |
Score colour shows how many signals stand behind it, never how good it is: amber, three or more; dimmer amber, two; grey, one. The Evidence column names them.
Stars, forks and last commit are as GitHub reported them when Armory last read each repository: for most, or later. A repository may have changed since.